Lucene search
K

55 matches found

OSV
OSV
added 2014/02/01 3:55 p.m.9 views

CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

7.8AI score
Exploits0References5
NVD
NVD
added 2014/02/01 3:55 p.m.14 views

CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS6.4AI score0.03235EPSS
Exploits1References4
OSV
OSV
added 2014/02/01 3:55 p.m.0 views

UBUNTU-CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS5.9AI score0.03235EPSS
Exploits1References4
CVE
CVE
added 2014/02/01 3:0 p.m.58 views

CVE-2013-7176

CVE-2013-7176 affects Fail2ban, where config/filter.d/postfix.conf in the Fail2ban filter could allow a remote attacker to trigger an IP ban on an arbitrary address via a crafted email address due to an improperly designed regular expression. The issue is addressed in Debian security advisories w...

5CVSS6.5AI score0.03235EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2014/02/01 3:0 p.m.11 views

CVE-2013-7176

config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS6.4AI score0.03235EPSS
Exploits1
OSV
OSV
added 2013/08/28 11:55 p.m.3 views

CVE-2013-2178

The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request...

6.5AI score
Exploits0References6
Debian CVE
Debian CVE
added 2013/08/28 5:18 p.m.15 views

CVE-2013-2178

The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request...

5CVSS6.5AI score0.01763EPSS
Exploits0
CVE
CVE
added 2013/08/28 5:18 p.m.74 views

CVE-2013-2178

The CVE-2013-2178 vulnerability affects Fail2ban before 0.8.10, where the files apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf do not properly validate log messages. This allows a remote attacker to block arbitrary IP addresses by crafting specific messages ...

5CVSS6.5AI score0.01763EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2012/07/20 10:40 a.m.16 views

CVE-2011-4592

The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron...

5CVSS6.5AI score0.01393EPSS
Exploits0References3
Prion
Prion
added 2012/07/20 10:40 a.m.16 views

Command injection

The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron...

5CVSS7AI score0.01393EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2012/07/20 10:0 a.m.23 views

CVE-2011-4592

The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron...

6.4AI score0.01393EPSS
Exploits0References3
CVE
CVE
added 2012/07/20 10:0 a.m.53 views

CVE-2011-4592

The CVE-2011-4592 issue affects Moodle’s command-line cron on Moodle 2.0.x (before 2.0.6) and 2.1.x (before 2.1.3). The root cause is improper interaction with IP blocking, which could allow remote attackers to bypass IP restrictions by exploiting a configuration where IP blocking was disabled to...

5CVSS6.5AI score0.01393EPSS
Exploits0References3Affected Software1
ThreatPost
ThreatPost
added 2010/12/27 4:21 p.m.18 views

Lessons From the WikiLeaks DDoS Attacks

Denial of Service DoS attacks are a common method used to take down Websites, servers, or even sections of the Internet. These attacks typically come in two forms: Distributed DoS DDos and DoS attacks. DDoS create a flood of traffic to a Website, server, or section of the internet that overwhelms...

Exploits0References2
Cvelist
Cvelist
added 2007/10/09 10:0 a.m.21 views

CVE-2004-2733

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...

6.8AI score0.01457EPSS
Exploits0References8
NVD
NVD
added 2004/12/31 5:0 a.m.18 views

CVE-2004-2733

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...

5.8CVSS6.8AI score0.01457EPSS
Exploits0References8
Rows per page
Query Builder